qualcomm / sa8650p CVEs

Memory corruption while processing a secure logging command in the trusted application.

Memory corruption while processing shared command buffer packet between camera userspace and kernel.

Memory corruption when IOCTL interface is called to map and unmap buffers simultaneously.

Transient DOS while processing received beacon frame.

Memory corruption while reading secure file.

Memory corruption may occur in keyboard virtual device due to guest VM interaction.

Memory corruption while reading a type value from a buffer controlled by the Guest Virtual Machine.

Memory corruption when PAL client calls PAL service APIs by passing a random value as handle and the handle is not validated by the service.

Memory corruption while invoking IOCTL calls for MSM module from the user space during audio playback and record.

transient DOS when setting up a fence callback to free a KGSL memory entry object during DMA.